Dashboards & Visualizations

Displaying loading notification on Splunk form searches

pj
Contributor

When i go to a form created in Splunk, enter the criteria required and hit search, there is no notification to inform the user that the search button has been pressed and the search is underway. Instead, the user just sits there thinking 'is splunk doing anything?!'.

Is there anyway to implement some kind of loading message/animation when a user hits search from a form?

Thanks!

1 Solution

sideview
SplunkTrust
SplunkTrust

If you're using the Advanced XML, it's as simple as putting in a JobProgressIndicator module. Typically you put it as a sibling right above your table's paginator module, or right above your FlashChart module. Or you can put in an entire FlashTimeline module, if the interactivity is a bonus. Or for charting views and views designed to run so-called transforming searches, you can put in an EnablePreview module and you'll get updated results rendered every few seconds while the job is running.

However given that you're asking this question, it's very likely that you're using the Simplified XML instead. Unfortunately the Simplified XML's <form> views have nothing like this.

I recommend converting your view to an advanced XML view, or read the embedded walkthrough copy in the ui_examples app and learn how to write your own advanced XML views.

http://answers.splunk.com/questions/1/how-can-i-convert-simple-view-xml-to-advanced-xml

http://splunkbase.splunk.com/apps/All/4.x/Add-On/app:Splunk+UI+examples+app+for+4.1%2B

View solution in original post

sideview
SplunkTrust
SplunkTrust

If you're using the Advanced XML, it's as simple as putting in a JobProgressIndicator module. Typically you put it as a sibling right above your table's paginator module, or right above your FlashChart module. Or you can put in an entire FlashTimeline module, if the interactivity is a bonus. Or for charting views and views designed to run so-called transforming searches, you can put in an EnablePreview module and you'll get updated results rendered every few seconds while the job is running.

However given that you're asking this question, it's very likely that you're using the Simplified XML instead. Unfortunately the Simplified XML's <form> views have nothing like this.

I recommend converting your view to an advanced XML view, or read the embedded walkthrough copy in the ui_examples app and learn how to write your own advanced XML views.

http://answers.splunk.com/questions/1/how-can-i-convert-simple-view-xml-to-advanced-xml

http://splunkbase.splunk.com/apps/All/4.x/Add-On/app:Splunk+UI+examples+app+for+4.1%2B

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...